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Abstract 

The  transformation  into  a  world  based  on  communication  and  information,  leads  to 
Information  Operations  (10)  becoming  more  important  than  ever.  Thus,  there  is  a  need  to 
develop  new  methodologies  for  suceessful  10,  taking  aecount  of  the  ehange  towards  network 
enabling  warfare  eapabilities. 

In  a  network  centrie  warfare  approach  it  is  important  to  understand  the  opponents’ 
network  structure  and  communication  system  and  how  they  use  these  resources.  Equally 
important  is  to  understand  your  own  network  strueture  in  terms  of  strengths  and  weaknesses. 
Every  type  of  network  has  it  own  vulnerabilities  in  the  form  of  vital  nodes,  links  and 
platforms,  regardless  of  whether  it  is  a  communications,  organizational  or  biological  network. 
If  you  understand  your  own  structure  as  well  as  your  opponents,  the  ehances  of  effective  10 
increase  greatly.  A  fruitful  way  forward  is  to  use  theories  based  on  eentre  of  gravity  (CoG) 
and  critical  vulnerabilities  (CV). 

The  paper  first  discusses  the  logic  of  networks  in  general  terms  and  then  considers 
different  types  of  networks  and  their  respective  abilities  to  resist  attaeks  of  different  kinds  due 
to  centre  of  gravity  and  critical  vulnerabilities. 
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Some  thoughts  on  the  application  of  military  theory  to 
Information  Operations  and  Network  Centric  Warfare 


Introduction 

The  move  to  a  warfare  concept  based  on  network  enabling  capabilities  is  a  truly  revolutionary 
step.  It  will  affect  military  development  in  many  areas  for  many  years  to  come.  One  important 
part  of  the  new  era  is  the  ability  to  conduct  Information  Operations  (10).  In  general  terms 
these  are  operations  related  to  information  in  order  to  influence  the  decision  process  of  an 
adversary.  The  overall  goal  is  to  persuade  the  adversary  to  act  in  a  manner  that  best  suits  your 
own  objectives  and  purposes.  Other  important  parts  of  10  are  to  gain  and  retain  control  of 
your  opponents’  communication  systems  and  networks  whilst  protecting  and  retaining  control 
of  your  own  systems. 

10  includes  five  capabilities  ^  electronic  warfare  (EW),  psychological  operations 
(PSYOPS),  operation  security  (OPSEC),  military  deception  and  computer  network  operations 
(CNO).  In  order  to  conduct  a  successful  operation  all  these  capabilities  should  be  used 
together  in  an  attack  or  defense  situation.  The  level  of  success  depends  on  the  coordination  of 
all  available  resources  in  time  and  space.  In  a  network  centric  warfare  approach  it  is  important 
to  understand  the  opponents’  network  structure  and  communication  system  and  how  they  use 
these  resources.  Equally  important  is  to  understand  your  own  network  structure  in  terms  of 
strengths  and  weaknesses.  Every  type  of  network  has  it  own  vulnerabilities  in  the  form  of 
vital  nodes,  links  and  platforms,  regardless  of  whether  it  is  a  communications,  organizational 
or  biological  network.  If  you  understand  your  own  structure  as  well  as  your  opponents,  the 
chances  of  effective  10  increase  greatly. 

Hence,  a  fruitful  way  to  develop  a  methodology  for  10  in  a  network  centric  warfare 
context  is  to  use  theories  based  on  centers  of  gravity  (COG)  and  critical  vulnerabilities  (CV). 
The  paper  first  discusses  the  logic  of  networks  in  general  terms  and  then  considers  different 
types  of  networks  and  their  respective  abilities  to  resist  attacks  of  different  kinds  before 
drawing  some  conclusions. 


The  logic  of  networks 

The  basis  of  all  modern  warfare  concepts  is  the  network.  The  network  concept  is  built  on  the 
idea  that  it  is  possible  to  interconnect  and  cluster  minor  parts  into  subsystems  and  whole 
structures  into  a  net  of  networks.  It  comprises  not  only  platforms,  nodes  and  links  in  a 
technical  sense  but  could  also  include  social  interactions  between  individuals,  groups  of 
people  and  organisations.  The  term  is  used  in  a  wide  range  of  disciplines.  Humans  have 
always  acted  in  a  networked  manner  but  owing  to  the  IT  revolution  people  have  access  to 
various  kinds  of  information  from  the  “ether”  and  may  through  this  gain  information 
superiority  over  an  opponent.  The  net  may  also  create  more  possibilities  to  act  locally  with 
global  consequences. 

The  growth  of  the  network  depends  on  the  number  of  links  and  nodes  within  it.  The 
number  of  combinations  could  be  more  or  less  infinite.  The  advantage  of  the  network  is  the 
ability  to  co-ordinate  and  muster  strength  against  a  target.  The  total  effect  should  be  higher 
than  using  single,  unconnected  nodes.  Eor  instance,  it  is  not  a  coincidence  that  the  terror 


'  Lamb,  C  (2005)  Information  Operation  as  a  core  competence.  JFQ-article:  issue  thirty  six 
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organisation  al-Qaida  organises  itself  in  a  loose  network  of  networks.  Within  the  network 
strueture  it  is  possible  to  reroute  information,  serviees,  people  and  equipment  depending  on 
the  situation. 

There  are  four  different  categories  of  networks  ;  hierarchical,  centralised  and 
decentralised  as  well  as  distributed.  All  of  them  have  their  own  advantages,  strengths  and 
weaknesses  in  relation  to  the  needs  of  co-ordination,  security  and  function  and  these  are 
further  discussed  in  Table  1. 


Centre  of  gravity  and  critical  vulnerability  in  different  types  of  networks 

Centre  of  gravity  (COG)  is  a  basic  term  used  in  military  theory.  For  many  years  a  number  of 
theorists  have  put  a  lot  of  effort  into  understand  the  concept  and  its  consequences.  Clausewitz 
was  the  first  person  to  discuss  the  concept.  His  theory  is  that  a  COG  is  some  kind  of  a  central 
point  of  force  and  speed  for  a  state  that  everything  should  be  related  to^.  Strange  et  al"^  on  the 
other  hand,  say  that  a  central  point  is  related  to  the  force  of  an  enemy.  The  characteristic  of 
that  type  of  force  is  either  physical  or  moral  and  may  exist  at  a  strategic,  operative  and  tactical 
level.  In  NATO  doctrine^  COG  is  defined  as  a  capability  or  place  where  a  nation,  an  alliance, 
a  military  force  or  other  type  of  grouping  set  their  standards  for  freedom  of  action,  physical 
strength  and  willingness  to  fight.  Echevarria^  uses  a  somewhat  different  definition.  He 
proposes  that  a  COG  is  not  strength  as  Strange  et  al  propose  or  a  quality  as  in  the  NATO 
definition  but  a  centripetal  force  that  glues  an  enemy’s  different  systems  together.  By  taking  a 
holistic  approach  in  order  to  study  the  factors  that  bind  the  parts  together  it  is  possible  to  find 
the  centre  of  gravity  of  the  enemy. 

Warden  takes  a  similar  approach.  He  argues  that  an  enemy  should  be  studied  as  a  system 
that  is  built  up  from  a  number  of  interrelated  parts.  The  basic  component  of  the  system  is 
energy  of  different  kinds:  physical  energies  (people,  buildings,  communications  and  weapons) 
as  well  as  psychological  energies  (will  power,  capability  and  capacity).  If  it  is  possible  to 
influence  the  flow  of  energy  in  a  specific  direction  by  hitting  certain  parts,  the  whole  system 
will  be  affected.  He  also  points  out  that  within  a  system  that  is  built  up  of  a  number  of  nodes 
and  links  (e.g.  relations  between  units  in  a  network),  there  should  be  only  a  small  number  of 
nodes  and  links  that  are  critical  for  the  system  as  whole. 

In  theory,  if  it  is  possible  to  identify  the  nodes  with  most  links  you  have  also  identified  the 
critical  points.  Some  military  theorists  argue  that  there  is  not  one  single  COG  in  a  system  but 
many  that  can  exist  simultaneously.  Hence,  the  understanding  that  there  are  a  number  of 
critical  points  is  also  the  first  step  to  carry  out  an  effective  operation  against  them^.  If  several 
COGs  are  attacked  at  same  time  in  parallel,  the  best  effect  should  be  achieved.  By  using  all 
resources  together,  the  possibility  of  achieving  a  system  change  should  increase  dramatically 


^  Baran,  P.  (1964).  On  distributed  communications.  Introduction  to  distributed  communications  networks.  Santa 
Monica,  USA:  RAND  Memorandum  RM  3420-PR 

^  Clausewitz,  C-V  (1832).  On  War.  Swedish  translation  by  Martensson,  Bdhme  och  Johansson  (1991). 
Stockholm,  Sweden:  Bonnier  Fakta  Bokforlag 

Strange,  J,  Iron  R.  (2001).  Understanding  Centres  of  Gravity  and  Critical  Vulnerabilities.  Research  paper, 
http  ://www.au.af.  mil/ an/ awc/awcgate/usmc/ cog2  .pdf 
^  NATO  (2003).  Gudelines  for  operational  planning 

®  Echevarria  A,  J.  (2003).  Clausewitz’s  center  of  gravity  it’s  not  what  we  thought.  Naval  War  College  Review. 
Vol.  LVI,  Nol. 

^  Warden,  J  (2004).  Centers  of  gravity  in  military  operations.  Preliminary  draft.  Royal  Swedish  Defence  College 
*  In  Wardens  argument  there  is  a  clear  connection  to  manoeuvre  warfare  theory:  to  get  inside  the  adversaries 
decision  cycles  (OODA-  loop)  and  through  this  to  achieve  a  system  collapse 
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and  in  the  longer  term  it  may  lead  to  a  total  collapse  of  the  enemy  structure.  Times,  co¬ 
ordination  of  resources  and  good  preparatory  work  are  consequently  vital  factors  that 
determine  if  the  operation  will  succeed  or  not.  Warden  also  points  out  the  importance  of  not 
mixing  the  term  COG  with  critical  vulnerabilities  (CV).  The  first  exist  because  they  are 
essential  to  the  existence  of  the  whole  system,  the  latter  are  interesting  first  when  planning  to 
attack  centres  of  gravity.  In  this  paper  the  both  terms  are  used  in  combination  and  related  to 
different  type  of  network  as  shown  in  table  1 . 
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Table  1:  COG,  Vulnerabilities  and  robustness  in  different  network  structures 


Type  of  network 

General 

description 

Vulnerabilities 
and  COG 

Robustness 

Hierarchical 

Well  defined  eommand  & 
eontrol  strueture.  Clear 
ehain  of  eommand  with 
good  ability  to  exeeute 
orders  at  a  rapid  paee. 

The  stmeture  laeks 
flexibility.  Hierarehieal 
networks  eould  be 
attaeked  using  a  top-down 
approaeh,  e.g.  using 
traditional  C2  warfare. 
Similarly  sueh  networks 
are  also  time  eritieal  in  the 
sense  that  it  is  possible  to 
eause  strategie 
eonsequenees  by 
disrupting  levels  of 
eommand  and/or  the 
eentral  node.  It  is  also 
possible  to  aehieve  taetieal 
advantages  through 
influeneing  sensors  in  the 
ehain.  The  information 
flow  eould  also  be 
manipulated  at  sensor 
level. 

Generally  hierarehieal 
networks  are  quite  robust 
against  internal  fuzzes 
sueh  as  “mutiny”  at  lower 
levels.  Due  to  their 
strueture,  it  is  possible  to 
separate  different  levels 
from  eaeh  other  and 
through  this  eontrol  them. 

Centralised 

In  a  eentralised  network 
all  sub  nodes  are  under 
eommand  of  the  eentral 
node  whieh  simplifies  C2 
aetivities. 

A  eentralised  type  of 
network  is  not  very 
flexible  but  with 
delegation  some  agility 
ean  be  aehieved.  The 
eentral  node  is  vulnerable. 
If  it  is  ehoked  or  saturated 
it  will  affeet  the  total 
network.  It  aets  as  a  bottle 
neek  through  whieh  all 
information  has  to  pass. 
There  is  always  some 
restrietion  in  the 
information  flow  beeause 
all  the  information  has  to 
be  approved  by  the  main 
node. 

Centralised  struetures 
should  be  attaeked  in  a 
similar  way  to  hierarehieal 
struetures,  e.g.  try  to  hit 
the  eentral  node  as  well  as 
to  deeeive  the  sensors  at 
the  extreme  points  of  the 
network. 

Decentralised 

Deeentralised  networks 
eonsist  of  a  number  of 
intereonneeted  eentralised 
sub-networks.  All  loeal 
nodes/sub  networks  are 
independent  of  the  others 
and  the  eentral  node. 

In  this  type  of  network 
both  the  main  node  and 
the  sub-networks  eentral 
nodes  are  vulnerable  to 
attaeks. 

A  distributed  eontrol 
meehanism  gives  greater 
power  to  the  edge,  in  this 
ease  the  sub-networks. 

The  strueture  it  is 
relatively  robust  against 
saturation  attaeks  on  a 
taetieal  level.  Through 
delegation  the 
analysing/ exeeuting 
eapaeity  eould  be  earried 
out  in  lower  levels  of 
eommand.  If  the  eapaeity 
of  the  eentral  node  is 
redueed  the  network  eould 
reorganize  itself  and  every 
sub-network  eould 
eontinue  their  respeetive 
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aetivities. 

Distributed 

A  distributed  network 
laeks  hierarehy  in  a 
traditional  sense.  Henee, 
all  information  should  be 
reeeived  all  nodes  in  the 
network.  In  a  distributed 
network  information  eould 
be  rerouted  between 
nodes.  If  some  part  of  the 
network  is  knoeked  out 
other  parts  eould  exeeute 
the  tasks.  An  advantage  is 
that  it  is  possible  to  use 
the  whole  network  as  a 
eommon  resouree  for  a 
eombined  and  eo- 
ordinated  attaek. 

A  possible  vulnerability  is 
related  to  an  unelear 
eommand  and  eontrol 
funetion.  A  distributed 
network  is  also  sensitive 
to  rumours  and  misleading 
information  due  to  the  faet 
that  all  nodes  are 
intereonneeted  to  eaeh 
others.  In  the  same  way  it 
is  also  robust.  It  is  always 
possible  to  get  a  “seeond 
opinion”  in  order  to  verify 
the  truth  of  the 
information.  A  problem  is 
that  information  should  be 
given  all  nodes  more  or 
less  in  real  time,  whieh 
opens  the  network  to 
saturation  attaeks.  The 
amount  of  signalling  that 
is  required  in  order  to  eo- 
ordinate  all  parts  of  the 
network  ean  be  very 
signifieant. 

It  is  possible  to  short- 
eireuit  those  parts  of 
network  that  are  under 
attaek  and  retain  the 
ability  to  aet.  Beeause  all 
nodes  are  more  or  less 
intereonneeted  the 
prerequisite  for  eombined 
attaeks  and  proteetion  is 
good.  Effeetive  and  fast 
routing  of  information 
gives  an  advantage.  Due  to 
its  strueture  the  network 
has  in-built  redundaney. 
This  is  the  most  robust 
network  against  physieal 
attaek  but  may  be  the  most 
vulnerable  to  deeeption  or 
saturation  attaeks. 

When  discussing  different  kinds  of  structures  it  is  important  to  point  out  that  a  mega  network 
could  contain  both  distributed  and  decentralised  networks  as  well  as  centralised  and 
decentralised  ones.  In  some  cases  the  growth  of  a  network  is  uncontrolled  or  “organic”  and 
the  form  it  ends  up  in  the  long  term  is  not  necessary  predictable.  The  best  example  of  this  is 
the  Internet. 

Furthermore,  ad-hoc  network  structures  are  used  for  networks  that  are  constantly 
reconfigured  according  to  situation  and  needs.  They  can  have  all  of  the  above  mentioned 
structures.  If  an  activity  requires  a  certain  type  of  structure  the  ad-hoc  network  “wakes  up” 
and  in  similar  way  closes  down  when  the  tasks  are  fulfilled.  This  will  of  course  affect  the 
overall  robustness  and  vulnerability  of  the  network.  In  general  terms  the  two  most  secure 
types  of  networks  are  the  decentralised  and  distributed  ones.  But  as  shown  they  also  have 
their  critical  points  that  may  form  the  target  for  an  information  operation. 


Conclusion 

The  transformation  into  a  world  based  on  communication  and  information,  leads  to  10 
becoming  more  important  than  ever.  Thus,  there  is  a  need  to  develop  new  methodologies  for 
successful  10,  taking  account  of  the  change  towards  network  enabling  warfare  capabilities.  A 
fruitful  way  forward  is  to  use  theories  based  on  centre  of  gravity  and  critical  vulnerabilities. 
Regardless  of  structure  all  networks  have  their  own  weakness  and  strength  and  by  knowing 
your  enemy’s  as  well  as  your  own  you  can  obtain  advantages  that  may  be  decisive  in  an 
eventual  conflict. 
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Objective 


Purpose:  to  discuss  development  of  InfoOps 
methodology  from  a  network  logic  perspective 
and  theories  based  on  CoGs  and  CVs 
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Theses 


Thes1  :  We  are  in  the  age  of  network  and  information  that 
change  prerequisites  for  war  faring  (RMA).  To  understand 
information  domain  is  becoming  more  important 

Thes2:  all  types  of  networks  have  their  own  strengths  and 
vulnerabilities  respectively  due  to  their  structure 

Thes3:  knowledge  and  understanding  of  your  own  and 
others  COGs  and  CVs  gives  an  advantage  (DBA) 

Thes4:  it  is  possible  to  develop  methods  for  InfoOps  by 
using  theories  for  network  centric  logics  as  well  as  theories  on 
CoGs  and  CVs 
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Mega  trends 


New  doctrines 


”lnfoOps-bag” 


•  Expeditionary  &  Mobiie  operations 

•  NBD  -  network  centric  logic 

•  Threats  from  terrorism 

•  Cooperation  civilian-military 

Technological  develop 

•  CTI  -  digitalization  & 
convergence 

•  New  material,  low  energy 
focus 

•  Automatized  systems  & 
sensors 


New  vulnerabilities 

•  Asymmetric  warfare 

•  COTS  -  products 

•  Critical  infrastructure 


New  actors 

•  Religious  &  political 
groups 

•  Criminals 

•  Individuals 


New  behaviors 


•  Network  organized  -  virtual 

•  Ad-hoc  structures 
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COGs  and  critical  vulnerabilities 


Definitions 

-  Clausewitz  (1832):  a  COG  is  some  kind  of  centrai  point  of  force  and 
speed  for  a  state  that  everything  shouid  be  reiated  to 

-  Strange  (2001):  CoG  is  reiated  to  the  force  of  an  enemy,  it  couid  be 
either  physicai  or  morai  and  may  exist  on  strategic,  operative  and 
tacticai  ievei 

-  NATO  GOP  (2003):  a  capabiiity  or  piace  where  a  nation,  aiiiance,  a 
miiitary  force  etc.  sets  their  standard  for  freedom  of  action,  physicai 
strength  and  wiiiingness  to  fight 
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COGs  and  critical  vulnerabilities  (cont.) 


Definitions 


-  Echevarria  (2003):  a  CoG  is  not  a  strength  or  a  quality  but  a 
centripetal  force  that  glues  an  enemy’s  different  systems  together 

-  Warden  (2004):  an  enemy  should  be  studied  as  a  system  that  is 
built  up  from  a  number  of  interrelated  parts.  The  basic  components 
is  energy  of  different  kinds  both  physical  and  psychological.  If  it  is 
possible  to  influence  the  flow  of  energy  in  a  specific  direction  by 
hitting  certain  parts,  the  whole  system  will  be  affected.  There  is  only 
a  small  number  of  nodes  and  links  that  are  critical  for  the  system  as 
whole 


There  could  be  several  CoGs  within  a  system.  The  nodes  with  most 
links  are  probably  CoGs.  Greatest  effect  will  be  achieved  by 
combining  attacks  on  several  nodes  at  same  time 

^FOI 


Forsvarsanalys  Roland  Heickerd 


The  logic  of  networks 


Characteristics  of  networks? 

-  purpose:  to  combine  functions,  platforms,  nodes  and 
links  to  a  system  of  system 

-  value:  ability  to  coordinate  activities,  mustering  of 
resources,  transmit/receive  information,  people  and 
products  etc. 

-  types:  biological,  social,  organizational 
communication  networks  etc. 

-  architecture:  actual  nodes  and  links 

-  topology:  information  flow 

dFOl 
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Example  of  a  biological  network 


Cell  metabolism 
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Network  Based  Defense:  NBD 


Command  &  Control,  sensors,  weapon  systems  and 
platforms  connected  into  a  network 


Different  kinds  of  networks 


Hierarchical 


Decentralized 


Centralized 


Distributed 
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COGs  and  critical  vulnerabilities  (1) 


Hierarchical  net 


Description:  Structured  command  &  control, 

clear  chain  of  command 


CoG:  Lacks  flexibility,  possible  to 

attack  top-down  (traditional 
C2W).  Time  critical,  vulnerable 
for  manipulation/deception  on 
sensor  level;  the  nodes  on  end  of 
the  chain 


lilFOl 


Robustness:  Robust  against  internal  ’’fuzzes” 

such  as  mutiny  at  lower  levels  . 

Possible  to  separate  different 
levels  from  each  other  and 
through  this  control  them 
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COGs  and  critical  vulnerabilities  (2) 


Centralized  net 


Description:  All  sub  nodes  are  under 

command  of  the  central  node 
which  simplifies  C2  activities 

CoG:  Not  very  flexible, 

central  node  is  sensible  for 
attacks,  acts  as  bottle  neck. 
Vulnerable  to  saturation  and 
’’information  overflow” 


Robustness:  Should  be  attacked  in  a 

similar  way  to  hierarchical 
structures 


eiFoi 
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COGs  and  critical  vulnerabilities  (3) 


eiFOi 


Description:  Consist  of  a  number  of 

interconnected  centralized 
sub-networks 


CoG:  Both  main  node  and 

sub-networks  central  nodes  are 
vulnerable  to  attacks 


Robustness:  Greater  power  to  the  edge, 

the  sub-networks,  robust 
against  saturation  attacks, 
if  central  node  is  eliminated 
it  is  possible  to  self 
organize 
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COGs  and  critical  vulnerabilities  (4) 


Distributed  net 


i 


Description:  Lacks  hierarchy,  all  information 

should  be  received  all  nodes, 
through  coordination  gives 
possibilities  to  use  network  as  a 
common  resource 

CoG:  Unclear  C2.  Sensitive  to 

rumors  and  misleading  but  also 
secure  due  to  possibility  to  get  a 

’’second  opinion”.  Need  for 

coordination  that  may  leads  to  a 
large  amount  of  signaling  with 
risk  for  saturation 


Robustness  Possible  to  short-circuit 
stressed  parts,  very  good 
ability  for  combined  attacks 
and  protection,  inbuilt 


redundancy 
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Conclusions 


•  The  development  of  methods  for  InfoOps 
ought  to  be  related  to  ongoing  mega 
change 

•  Network  centric  logic  and  theories  of  CoG 
could  be  useful  tools/parts  of  the  method 

•  All  networks  have  it  owns  pros  &  cons, 
strengths  and  vulnerabilities  and  by 
knowing  your  enemy’s  as  well  as  your  own 
you  can  obtain  advantages  that  may  be 
decisive  in  an  eventual  conflict 
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More  to  read  ... 


10  Sphere:  The  Professional  Journal  of  Joint 
Operations.  Autumn  2005 

Vardering  av  telekrig  i  NBF.  FOI  - 
Underlagsrapport.  December  2005 
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Questions? 


